Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2c735075 by Salvatore Bonaccorso at 2020-02-24T22:48:57+01:00
Add Debian bug references for CVE-2020-1938/tomcat* versions
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18178,8 +18178,8 @@ CVE-2020-1939
CVE-2020-1938 [Tomcat AJP local file inclusion]
RESERVED
- tomcat9 <unfixed> (bug #952437)
- - tomcat8 <removed>
- - tomcat7 <removed>
+ - tomcat8 <removed> (bug #952438)
+ - tomcat7 <removed> (bug #952436)
NOTE: AJP disabled in Debian in default configuration since 2008
NOTE: fixed in upstream versions 9.0.31, 8.5.51, 7.0.100
NOTE:
https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c735075d0bb46e90fd3cc163460e3b61ff633b4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c735075d0bb46e90fd3cc163460e3b61ff633b4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
